Commit graph

5534 commits

Author SHA1 Message Date
Hans-Christoph Steiner
c02a98f364 bump to version v1.1.4 2019-08-15 10:45:50 +02:00
Hans-Christoph Steiner
bb36bf6c67 update CHANGELOG for v1.1.4 2019-08-15 10:45:23 +02:00
Hans-Christoph Steiner
dff47beb01 tests: conditionally disable tests that can't work with apksigner
apksigner treats MD5 signatures as valid, fdroid does not.
2019-08-15 10:16:03 +02:00
Hans-Christoph Steiner
6b013d01ac tests: skip disabled_algorithms test when apksigner is present
apksigner doesn't treat MD5 signatures as deprecated, so that portion of
the tests would always fail.
2019-08-15 10:15:25 +02:00
Michael Pöhn
8fe1583f83 improve bitcoin validation regex + testcases 2019-08-14 23:16:40 +02:00
Hans-Christoph Steiner
fd870c59bd bump to version v1.1.3 2019-07-03 23:44:22 +02:00
Hans-Christoph Steiner
fd1e22e791 ./setup.py release: make upload step manual so CI can run first
There is lots of CI tests for the Debian package, so it is good to first
run those Debian CI tests before uploading an fdroidserver release.
2019-07-03 23:44:22 +02:00
Hans-Christoph Steiner
e8cd0986e3 include all relevant files in source tarball (MANIFEST.in) 2019-07-03 23:44:22 +02:00
Hans-Christoph Steiner
5ba7419128 tests: only run source tarball test if running from git clone 2019-07-03 23:44:22 +02:00
Hans-Christoph Steiner
4ddd840471 tests: only run hooks/pre-commit if its present (not in source tarball) 2019-07-03 20:47:27 +02:00
Hans-Christoph Steiner
9e32e2d770 tests: common.test_sign_apk requires aapt to run 2019-07-03 16:21:43 +02:00
Hans-Christoph Steiner
b484e9ecfd tests: handle when apksigner considers MD5 signatures valid 2019-07-03 16:21:43 +02:00
Hans-Christoph Steiner
2e59220644
gitlab-ci: disable bandit fail on standard debug keystore password 2019-06-30 22:50:41 +02:00
Hans-Christoph Steiner
74a0abc530 update bash completion for new deploy/nightly flags 2019-05-02 08:53:22 +02:00
Hans-Christoph Steiner
5a2534b604 nightly: archive older versions; remove archive if git mirror is full 2019-05-01 21:02:11 +02:00
Hans-Christoph Steiner
6e7e9b355c deploy: if git mirror > 1GB after deleting history, delete the archive
git mirrors are meant to be an easy way to host a repo that is zero
maintenance.  They are not meant to be the canonical repo with full,
preserved archive.  This option provides the zero maintenance mode.
2019-05-01 21:02:11 +02:00
Hans-Christoph Steiner
833f23cf89 scanner: allow local Debian Maven repo file:///usr/share/maven-repo
It is now possible to build an app using only things in Debian.  Since the
buildserver will always control the contents of file:///usr/share/maven-repo,
it is the most safe repo there is.
2019-05-01 21:02:11 +02:00
Hans-Christoph Steiner
01fb62fff4 publish: fix stupid error in repro-signing and add integration test
stoopid mistake in ea84014f9b
2019-04-11 13:31:38 +02:00
Nico Alt
bb80c729f5 Version 1.1.2, including changelog 2019-03-29 08:42:49 +01:00
Nico Alt
a5851c083d Flush file before passing it to next function
When downloading a repo index, the downloaded index got written to a
file with `.write()` in a `with` clause. Before the file got actually
written to the disk, it got already passed into the next function,
resulting in a `VerificationException`:
```
JAR signature failed to verify: /tmp/tmppq2r51r0
jarsigner: java.util.zip.ZipException: zip file is empty
```

This behavior got introduced in
869cc114a3.

I've found this bug with help of Repomaker's tests: https://gitlab.com/fdroid/repomaker/merge_requests/215#note_148994053
2019-03-29 08:39:25 +01:00
Hans-Christoph Steiner
6634407c60 update: allow tests to pass when apksigner is not installed
This is only for the v2/v3 signatures.

fdroid/fdroidserver#627
2019-02-03 16:54:32 +01:00
Hans-Christoph Steiner
2157498dcf version 1.1.1 2019-02-03 15:50:39 +01:00
Hans-Christoph Steiner
43f8c29cc6 add CHANGELOG 2019-02-03 15:50:39 +01:00
Hans-Christoph Steiner
50ca3967cc update: fix tests when running without apksigner 2019-02-03 15:50:39 +01:00
Hans-Christoph Steiner
17dc231dc9 update: fix running without androguard
Soon, we can rip out all the aapt parsing stuff, but not yet!
2019-02-03 15:50:39 +01:00
Hans-Christoph Steiner
5d39a97ab8 Merge branch 'index-v1-sdk-as-int' into 'master'
fdroid update: treat target and min sdk version as integers

Closes #596

See merge request fdroid/fdroidserver!596
2019-02-03 14:47:36 +00:00
Hans-Christoph Steiner
c386774413 Merge branch 'weblate' into 'master'
Updated by hook in Weblate to make PO files to match POT (msgmerge)

See merge request fdroid/fdroidserver!620
2019-02-01 15:20:36 +00:00
Hans-Christoph Steiner
ec578fe85f Updated by hook in Weblate to make PO files to match POT (msgmerge) 2019-02-01 15:20:36 +00:00
Hans-Christoph Steiner
9bc81f2689 Merge branch 'encoding-warning' into 'master'
log a warning when encoding is not set to utf-8

Closes #617

See merge request fdroid/fdroidserver!619
2019-02-01 13:16:50 +00:00
Michael Pöhn
5a1c6cf2de log a warning when encoding is not set to utf-8 2019-02-01 13:26:31 +01:00
Hans-Christoph Steiner
09bbca4a51 update: force all "SDK Version" values to int when parsing aapt 2019-02-01 09:56:36 +01:00
Michael Pöhn
dd695c650e update: treat target and min sdk version as int 2019-02-01 09:56:21 +01:00
Hans-Christoph Steiner
64bab7a94c Merge branch 'v2-sig-support' into 'master'
first basic support for APK Signature v2 and v3

See merge request fdroid/fdroidserver!618
2019-02-01 08:40:20 +00:00
Hans-Christoph Steiner
2907aa3ea3 fallback to v3 signatures if v1 and v2 are not available 2019-02-01 09:18:00 +01:00
Hans-Christoph Steiner
d96f5ff660 support APK Signature V2 when apksigner is installed
This was done with much help from @uniqx.  This is the first level of
supporting APK Signatures v1, v2, and v3.  This is enough to include
APKs with any combo of v1/v2/v3 signatures.  For this to work at all,
apksigner and androguard 3.3.3+ must be installed.

closes #399
2019-02-01 09:17:56 +01:00
Hans-Christoph Steiner
ea84014f9b make signer_fingerprint() accept DER encoded certs
androguard's v2 signature methods return DER-encoded certificates.  The DER-
encoded certificates are parsed from JAR Signature's raw "Signature Block
File".
2019-02-01 08:50:57 +01:00
Hans-Christoph Steiner
4d68163175 remove --on-server from completion, it is not a user option
fdroid/fdroidserver!617
a787d123a2
2019-02-01 08:50:57 +01:00
Hans-Christoph Steiner
709d35be0e Merge branch 'patch-1' into 'master'
change glob filter for graphics to not filter out valid IETF RFC5646 locales (fixes #621 and #357)

Closes #357 and #621

See merge request fdroid/fdroidserver!611
2019-01-31 22:09:41 +00:00
Michael Pöhn
f5a10e6e82 Merge branch 'basebox-0.5.1' into 'master'
makebuildserver: update to basebox 0.5.1

See merge request fdroid/fdroidserver!615
2019-01-31 13:32:44 +00:00
Tobias Zwick
1cbd19e33d change back link to fastlane docs 2019-01-30 11:29:55 +01:00
Hans-Christoph Steiner
07759d7550 convert all translation strings to use unicode ellipses
This is already the case in fdroidclient and Debian in general. Weblate
also defaults to checking that the unicode ellipsis is used.

sed -i 's,\.\.\.",…",' locale/fdroidserver.pot locale/*/*/*.po
2019-01-29 13:57:05 +01:00
Hans-Christoph Steiner
7133cede89 gitlab-ci: add cache, extend timeouts/retries to stabilize Fedora job
This is happening too often:
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: Error downloading packages:
  Curl error (28): Timeout was reached for https://mirrors.fedoraproject.org/metalink?repo=updates-released-f29&arch=x86_64 [Connection timed out after 30001 milliseconds]
ERROR: Job failed: exit code 1

https://gitlab.com/fdroid/fdroidserver/-/jobs/152719443

# Conflicts:
#	.gitlab-ci.yml
2019-01-29 13:40:55 +01:00
Hans-Christoph Steiner
3b84a82728 gitlab-ci: fix locale checks in pip_install job 2019-01-29 13:01:25 +01:00
Hans-Christoph Steiner
965b544150 Merge branch 'hide-on-server-cli-flag' into 'master'
fdroid build: hide --on-server cli flag

See merge request fdroid/fdroidserver!617
2019-01-29 11:41:15 +00:00
Michael Pöhn
a787d123a2 fdroid build: hide --on-server cli flag 2019-01-29 11:23:45 +01:00
Hans-Christoph Steiner
54a1c06ce0 tagging release v1.1
-----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1
 Comment: GPG for Android - https://guardianproject.info/code/gnupg/
 
 iQEcBAABCAAGBQJcTzGDAAoJED4XeBe6G5v6edMH+wRDL6aInF2yLHx/mYMozY+x
 FSxPb7lyIFYVMfjjoldfL15B8cZgCAKbS7M2xcm0eWjfUnu6yBs9GncsY87DhCYm
 tsxI9MOWELzz6e3KHe/C/21vhZj+lIkyw6rIqJ2J0Aw7E6AKxd08d7N8FnyTVhNx
 uq6tKasz6QiDXcwr9G+nikQ3mJLmXRa/noOIJ33ESdGwx2MfvQyqV2JGKBRaQXDD
 bry0w2foT8fjmxxyEtDBxMTFNlEMefS4YccEgHrxxsTbU7ZCIh1+O8wMmIud7n0v
 AEmjjZS/6sF2ckbna+1XaRbz4lDwTxi/p8V4lR+HhKqwIxjDPsb/r6mnRSxqehs=
 =7O4W
 -----END PGP SIGNATURE-----

Merge branch into 'master'

tagging release v1.1

* tag '1.1':
  set version to 1.1
2019-01-29 10:02:12 +01:00
Michael Pöhn
7ea049ba91 Merge branch 'makebuildserver-avoid-cache-request-flood' into 'master'
makebuildserver: avoid trying to continue cache downloads when checksum is okay

See merge request fdroid/fdroidserver!616
2019-01-29 07:59:41 +00:00
Michael Pöhn
8c025b91d8 makebuildserver: avoid trying to continue cache downloads when checksum is okay 2019-01-28 22:16:48 +01:00
Michael Pöhn
6823d534ee update basebox to 0.5.1 2019-01-28 21:08:04 +01:00
Tobias Zwick
50b1e648b2 remove listing about the expected directory structure from the docstring, instead, link the current fastlane docs 2019-01-28 19:44:03 +01:00